Authentication Commands 4

TACACS+ Client

Terminal Access Controller Access Control System (TACACS+) is a logon authentication protocol that uses software running on a central server to control access to TACACS-aware devices on the network. An authentication server contains a database of multiple user name/password pairs with associated privilege levels for each user or group that require management access to a switch.

Table 4-29. TACACS Commands

Command

Function

Mode

Page

tacacs-server host

Specifies the TACACS+ server

GC

4-73

 

 

 

 

tacacs-server port

Specifies the TACACS+ server network port

GC

4-73

 

 

 

 

tacacs-server key

Sets the TACACS+ encryption key

GC

4-74

 

 

 

 

show tacacs-server

Shows the current TACACS+ settings

GC

4-74

 

 

 

 

tacacs-server host

This command specifies the TACACS+ server. Use the no form to restore the default.

Syntax

tacacs-server host host_ip_address no tacacs-server host

host_ip_address - IP address of a TACACS+ server.

Default Setting

10.11.12.13

Command Mode

Global Configuration

Example

Console(config)#tacacs-server host 192.168.1.25

Console(config)#

tacacs-server port

This command specifies the TACACS+ server network port. Use the no form to restore the default.

Syntax

tacacs-server port port_number no tacacs-server port

port_number - TACACS+ server TCP port used for authentication messages. (Range: 1-65535)

Default Setting

49

4-73

Page 249
Image 249
SMC Networks 16 10BASE-T, 100BASE-TX TACACS+ Client, Tacacs-server host, Tacacs-server port, Tacacs Commands Function Mode